144 Mastra npm Packages Compromised via Hijacked Contributor Account17. June 20264. July 2026Cybersecurity144 npm packages of the AI developer platform Mastra were poisoned with malicious code through a hijacked contributor account. Share on: